Document Fraud at the Point of Hire: What Fraudulent Documents Look Like and What to Do

In January 2026, the Home Office launched a formal investigation after a Times investigation uncovered a criminal operation selling fraudulent job offers and sponsorship certificates to overseas workers for up to £13,000 each. Agents were fabricating the documentation needed to support Skilled Worker visa applications, placing fake workers into roles they had no legal right to occupy, and doing it at scale.

The document fraud sitting underneath that operation is the same document fraud that lands on HR desks every week. Fake certificates. Altered passports. Genuine documents belonging to someone else. Most employers never find out until something else goes wrong and the trail unravels.

What Most Organisations Get Wrong

In 18 years of running a vetting operation, the single biggest mistake I saw was this: organisations treated the document check as a formality. Someone presented a passport. It looked like a passport. It went in the file.

That is not a check. It is a gesture.

The people carrying out those checks were often untrained. Not because they were careless, but because nobody had told them what to look for. They knew which box to tick. They had not been shown what a substituted photo looks like, or what to do when a document feels slightly wrong but they cannot say why.

The second mistake was assuming domestic documents are safer. British and Irish passports. UK driving licences. Analysis by identity verification firm TrustID found that British and Irish identity documents account for over 80 percent of all faked documents detected in right to work checks. Domestic documents are not safer. They are just the ones screeners are least suspicious of.

The third mistake was not knowing what to do when something looked wrong. I have spoken to screeners who spotted a concern and handed the document back anyway, because they did not know whether they were allowed to keep it and did not know who to call. That hesitation is how fraud gets through.

The Three Types of Fraudulent Documents

An impostor using a genuine document. The passport or licence is entirely real. It belongs to someone else. The fraud is the person presenting it. Your check must always include confirming that the person in front of you matches the photograph and the biographical details on the document.

An altered genuine document. A real document that has been physically modified. The most common alteration is photo substitution, where the original photograph has been removed and replaced with one of the fraudster. Altered documents often appear convincing to the untrained eye but they almost always leave physical traces.

A counterfeit document. Created from scratch to resemble a genuine one. Quality varies enormously. What counterfeits cannot replicate accurately are the security features built into genuine documents by the issuing authority.

What to Look For

The photograph. On a genuine passport, the photo is laminated into the biographic data page. Look at the edges. On an altered document the laminate will often show signs of having been lifted and resealed: slight bubbling, a visible edge where the laminate does not lie flat, or a mismatch in texture between the area over the photograph and the rest of the page.

The biographical data. Read every field. Name, date of birth, nationality, document number, expiry date. Cross-reference against any other documents the candidate has presented. Inconsistencies between documents are a significant red flag.

The security features. Tilt the biographic data page and observe the hologram. On a genuine document it shifts and changes as you move it. On a counterfeit it is often flat or poorly replicated. A document that feels unusually thin or flexible is worth escalating.

The font. Genuine documents use specific, consistent typefaces for every field. On an altered document, an amendment to a date or a name will often use a font that is slightly different in weight or spacing. It is easier to spot than it sounds once you know what you are looking for.

The person. Confirm that the person in front of you matches the photograph specifically, not just broadly. A vague resemblance is not a match.

What to Do When Something Does Not Look Right

Do not accuse the candidate. You may be wrong. What you are dealing with is a concern, not a confirmed finding.

Do not hand the document back if you have a genuine suspicion it is fraudulent. Under the Fraud Act 2006, a document used to obtain employment by deception is a fraud instrument. You are not required to return it.

Take a copy immediately. Escalate to a senior person. Your organisation should have a clear process for this. If it does not, that is a governance gap that needs addressing.

If the document relates to a right to work check and you believe it may be fraudulent, contact the Home Office Employer Checking Service. If you believe a criminal offence has been committed, report the matter to the police.

Document every step: the time you raised the concern, who you escalated to, what decision was made and on what basis.

The Consequences of Getting It Wrong

Accepting a fraudulent document does not automatically give you a statutory excuse. That protection only exists if the check was carried out correctly. If the fraud would have been apparent to a reasonably careful examiner and you missed it, the defence falls away.

The civil penalty for employing a person without the right to work is up to £60,000 per illegal worker. That applies per worker, not per incident.

Beyond right to work, accepting a fraudulent identity document can expose your organisation to negligent hiring claims. It can trigger audit failure under BS7858, BPSS, FCA, CQC and other standards. In some regulated environments it constitutes a reportable breach in its own right.

Those are not theoretical outcomes. They are what I watched happen when document checks failed.

Charlotte Is the Answer

Charlotte is the United Kingdom's first AI compliance advisor built entirely on specialist employment screening and vetting expertise. She covers 65 specialist topic areas across the full scope of UK pre-employment screening, vetting, compliance and risk, built on 18 years of real operational experience. Ask her anything and get a clear, expert, practical answer at the exact point the decision needs to be made.

Document fraud sits firmly within Charlotte's knowledge. Whether you are dealing with a concern about a specific document, trying to build a process for handling suspected fraud, or needing to understand your legal position when something does not look right, Charlotte can give you a direct, practical answer right now.

To give you a sense of what Charlotte can do on this topic, here is the question I put to her and the answer she came back with.

If you use a vetting platform, HR system or recruitment tool, this is worth raising with your provider. Charlotte can be embedded into any authenticated software environment with a single CSS code. No technical complexity. No data risk. Ask your platform whether Charlotte is something they offer or are considering.

If your organisation operates its own internal software or system, you can trial Charlotte directly. Software platforms and organisations with their own internal systems can access Charlotte free for seven days at https://vettinghub.co.uk/trial. One user. Full access. No commitment and nothing to cancel if she is not right for you.

Getting Charlotte deployed requires a one-time setup of £500 and an ongoing monthly licence of £995. There are no per-user or per-seat charges. Access runs month to month with no long-term commitment.

Further Reading

If document fraud is a concern for your organisation, two other posts on this blog are directly relevant.

My post on the AI fraud threat in employment screening covers how artificial intelligence is being used to generate fraudulent documents that are harder than ever to detect through a manual check alone: https://vettinghub.co.uk/post/ai-fraud-employment-screening-threat-landscape-uk-2026

The deepfakes and synthetic identity post covers where document fraud and identity fraud converge most acutely. When a candidate is onboarded remotely, the physical check that catches many fraudulent documents never happens: https://vettinghub.co.uk/post/deepfakes-synthetic-identity-fraud-remote-onboarding

Frequently Asked Questions

What are the most common types of document fraud in employment screening?

There are three main types. An impostor using a genuine document that belongs to someone else. An altered genuine document, most commonly one where the photograph has been substituted. And a counterfeit document created from scratch to resemble a genuine one. All three occur regularly in employment screening, and all three require a different response when detected.

What should I do if I think a candidate has presented a fraudulent document?

Do not accuse the candidate. Do not return the document if you have genuine suspicion it is fraudulent. Take a copy, record your specific concern and escalate to a senior person immediately. If it relates to a right to work check, contact the Home Office Employer Checking Service. If you believe a criminal offence has been committed, report it to the police.

Can I legally retain a document I believe is fraudulent?

Yes. You are not required to return a document you have reasonable grounds to believe is being used fraudulently. Under the Fraud Act 2006, a document used to obtain employment by deception is a fraud instrument. Retain it, take a copy and escalate through the appropriate channels before making any further decision.

Does accepting a fraudulent document remove my statutory excuse for a right to work breach?

Yes, it can. A statutory excuse only protects you if the check was carried out correctly and the fraud was not reasonably apparent. If a reasonably careful examiner would have identified it and you missed it, the excuse may not apply. The civil penalty of up to £60,000 per illegal worker remains a live risk.

The Right Answer at the Right Moment

If your organisation encounters document fraud, the last thing you need is uncertainty about what to do next.

If you use a vetting platform, HR system or recruitment tool, ask your provider whether Charlotte is available. She can be embedded into any authenticated software environment with a single CSS code, giving your team expert guidance at the exact point of decision without leaving the systems they already use.

If your organisation operates its own internal software, try Charlotte for seven days at https://vettinghub.co.uk/trial. Full access, one user, no commitment and nothing to cancel if she is not right for you.

A one-time setup of £500 deploys Charlotte securely. Ongoing access is £995 per month, flat rate, with no per-user charges, no long-term contracts and no limits on use. Charlotte covers 65 specialist topic areas across pre-employment screening, vetting, compliance and risk, and she is available every hour of every day.

Document fraud is one of those moments where the right answer needs to arrive in seconds, not hours. Someone is sitting in front of a document that does not look right and they need to know what to do now. That is exactly what I built Charlotte for.